From a0d896abbe1f9a9b308f7fb9ac6fb5a0eb029fb2 Mon Sep 17 00:00:00 2001 From: Simon Lowe <164848325+slowe47@users.noreply.github.com> Date: Fri, 27 Mar 2026 08:22:17 +0100 Subject: [PATCH 1/3] Create PRIVACY.md --- components/ILIAS/Test/PRIVACY.md | 309 +++++++++++++++++++++++++++++++ 1 file changed, 309 insertions(+) create mode 100644 components/ILIAS/Test/PRIVACY.md diff --git a/components/ILIAS/Test/PRIVACY.md b/components/ILIAS/Test/PRIVACY.md new file mode 100644 index 000000000000..b4957d9f1343 --- /dev/null +++ b/components/ILIAS/Test/PRIVACY.md @@ -0,0 +1,309 @@ +# Test Privacy + +> **Disclaimer: This documentation does not guarantee completeness or accuracy. Please report any missing or incorrect information via [Pull Request](docs/development/contributing.md#pull-request-to-the-repositories).** + +## General information + +The module Test and the module TestQuestionPool are still tied together in most intricate ways. The primary component of concern in regards to privacy related evaluations is the Test. As the lines between these components are blurred, it is advised to never look at only one of the components but always at both. + +## Integrated components + +The Test component employs the following services, please consult the respective privacy.mds + + - [AccessControl](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/AccessControl/PRIVACY.md): Is used for permission handling and is able to present personal data. + - [Certificate](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Certificate/PRIVACY.md): Is able to use personal data for certificate generation. + - [COPage](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/COPage/PRIVACY.md): Is used for content creation/presentation and is able to store, present and delete personal data. + - CSV: Is used for export creation and is able to export personal data. + - Excel: Is used for export creation and is able to export personal data. + - Export: Is used for export creation and is able to export personal data. + - [InfoScreen](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/InfoScreen/PRIVACY.md): Is used as in any repository object and is able to present personal data. + - [KioskMode](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/KioskMode/PRIVACY.md) + - [LTI Provider](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/LTIProvider/PRIVACY.md) Is used to provide the Test via LTI and is able to present personal data. + - [Metadata](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/MetaData/Privacy.md): Stores the full name of the author of the test. + - [Notes](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Notes/Privacy.md): Is used to create, edit and present comments for the test. + - [Object](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/ILIASObject): Stores the account which created the object as it's owner and creation and update timestamps for the object. + - [Skill (Competence) Service](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Skill/PRIVACY.md) + - [Taxonomy](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Taxonomy/PRIVACY.md) + - [TestQuestionPool](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/TestQuestionPool/PRIVACY.md) + - Tracking: Is used for Learning Progress and is able to store, present and delete personal data. + +## Configuration + +### Administration - Test and Assessment + +At the Administration node for Test and Assessment users having 'Edit Settings' permissions are able to configure some functionality, which has an impact on personal data handling. + +#### Settings + +The field 'Unique user criteria' is used to specify which unique user criteria is used for test result import/export. Because of the following options this may changes the personal data contained at the export of a test: +- usr_id +- login +- email +- matriculation +- ext_account + +Those information originate from the user service (see above). + +#### Log Data + +At the subtab 'Settings' there are the following options for logging (of personal data): + +- The field 'Activate Test and Assessment Logging' activates the logging at the 'History' of the test. +- The field 'Log IP' acitvates the saving of the IP address of users at the 'History' of the test. + +### Settings of a test + +The settings of a test can be changed by users having 'Edit Settings' permissions. + +#### General + +At the subtab 'General' from the settings of a test it is possible to choose one of the following options for the field 'Privacy': +- Results with names (pre-selected) +- Results without names / anonymous test + +If the second option is selected, no personal data of test attempts is presented at the test. If the user is not logged in while performing the test attempt, additionally no personal data is stored. Please have a look at the detailled information at the following sections. + +In addition the 'Exam View' and it's sub-option 'Show Name of Participant' can be activated. + +#### Scoring and Results + +At the subtab 'Scoring and Results' from the settings of a test a user having 'Edit Settings' permission is able to: + +- specify wether users have access to their own test results (and therefore to their own personal data). +- activate the 'Rankings' functionality, which potentially presents personal data to all participating users. + +## Data being stored + +The data being stored is listed by the tabs of the test. + +### Test - data being stored while performing a test + +While a user performs a test, the following data is stored. After finishing the test, this data is presented at various other tabs (see [Data being presented](#Data being presented)). +This is needed in order to provide the functionality of the test component. All listed data is at least linked to the 'User ID'. + +- User ID +- Client IP +- Starting time stamp of the test attempt +- Last access time stamp of the test attempt +- Duration of the test attempt +- Answer content and timestamp of answer content submission +- Status of questions (Not answered/Answered) +- Scoring for questions (achieved points) ? +- Mark and status of the test attempt ? +- Log Entry Type and Interaction Type + +### Settings + +In general the change of settings is logged. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. + +#### Edit Introduction & Edit Concluding Remarks + +Those tabs use the COPage service and store personal data within this usage (see above). + +#### Personal Test Settings Templates + +- At the creation process of Personal Test Settings Templates the field 'Author' is prefilled with the full name of the user, which is creating the template. If this value is not changed, the name of the user is stored. +- Together with the field 'Author' the 'Creation Date' of the template is stored. + +### Questions + +- At the creation process of questions the field 'Author' is prefilled with the full name of the user, which is creating the question. If this value is not changed, the name of the user is stored. +- At the editing of questions the field 'Author' contains the previous saved value. If the value is changed and personal data is entered, it will be stored. +- Ownership of Questions: Owners of questions are stored in the Test as reference to the 'User ID'. The data is required to manage detailed access and permissions on usage and editing of the question. +- The creation, change and deletion of questions is stored as log entry. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. + +### Participants +- A user having 'Edit Settings' permission is able to assign users as participants of a test. +- In addition, users which perform a test are added as participants automatically. +- For all users, which are assigned as participants, the 'User ID' is stored as link to the test. +- If a 'Client IP Range' is set for a participant, the entered value is stored, linked to the 'User ID'. +- For some actions, which are offered at this tab, log entries are stored. Therefore the 'User ID' (of the user with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. + +### Scoring +If the Scoring of a test attempt is changed at this tab, this event is logged. Therefore the 'User ID' (of the user with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. + +### Metadata + +This tab uses the Metadata service and stores personal data within this usage (see above). + +## Data being presented + +The data being presented is listed by the tabs of the test. + +### Test - data being presented while performing a test + +While performing a test, the 'Name' of the participant himself is shown, if the 'Exam View' and it's sub-option 'Show Name of Participant' is activated. + +### Settings + +#### Edit Introduction & Edit Concluding Remarks + +Those tabs use the COPage service and present personal data within this usage (see above). + +#### Personal Test Settings Templates + +- At this tab the values of the field 'Author' for all Personal Test Settings Templates are shown, which may contain personal data. +- The 'Creation Date' of the template is also prsented, which is directly linked to the value for 'Author'. + +### Questions + +At the overview of the questions of a test, the values of the field 'Author' for all questions are shown, which may contain personal data. + +The following sections describe the possible actions for the questions of a test. + +#### Statistics + +The 'Author' of other tests is displayed at the table 'This question is used in the following tests', if the question is used in other tests, too. This information originates from the metadata service (see above). + +#### Print Answers + +All answers to a question with the 'Name' of the participants are presented here. If the test is set to anonymous (see above), this data is not presented. + +### Participants + +The table 'Participants' shows following personal data linked to the test attempt. Those are also shown, if the action 'Show Results' is used. + +- Name (originates from the user service) +- Login (originates from the user service) +- Matriculation Number (originates from the user service) +- Starting time stamp +- Duration +- Number of Attempts Made +- Status of the test attempt +- Scored points +- Number of questions answered +- Percentage Score +- Passed-status +- Grade +- Scoring completed- +- Last access time stamp of the test attempt + +If the test is set to anonymous (see above), 'Name', 'Login' and 'Matriculation Number' are not presented. + +### My Results + +At the subtabs 'Test Results' and 'Printable List of Answers' users are able to access their own data. Those data contains their 'Name' and 'Matriculation Number'. + +If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not presented. + +### Scoring + +The tab 'Scoring' shows following personal data linked to the test attempt. + +- Name +- Login +- Test ID +- Number of the Scored Test Attempt +- Scored points for all questions +- Scoring completed + +If the test is set to anonymous (see above), 'Name' and 'Login' are replaced by the 'Test ID'. + +### History + +At the 'History' log entries are shown, which originate in the change of the test settings and questions or in the participation of the test. The following personal data is presented: + +- Date and Time of the event +- Name and Login of Author or Participant +- Client IP (of participants) +- Log Entry Type +- Interaction Type + +If the test is set to anonymous, no entries are shown for the participation of the test. + +### Metadata + +This tab uses the Metadata service and presents personal data within this usage (see above). + +### Administration - Test and Assessment - Log Data - Log Data Output + +At this tab of the Administration, the same personal data is listed for all tests at the platform as listed at the section 'History'. + +## Data being deleted + +The data being deleted is listed by the tabs of the test. In general, only users with the 'Edit Settings' permission are able to delete data. Exceptions are explicitly listed. + +### Test + +Users with the 'Read' permission are able to delete their own answers while performing a test, which are linked to their 'User ID'. The answers are not linked to the 'User ID', if the test is set to anonymous and is performed without being logged in. + +### Questions + +It is possible to delete questions and within this the personal data at the field 'Author' is deleted. + +### Participants + +At this tab the following personal data can be deleted: + +- Test results of participants and all linked personal data +- Assignment of users as participants and all linked personal data + +### Administration - Test and Assessment - Log Data - Log Data Output + +Users with the 'Edit Settings' permission of this administration node are able to delete any log entries and all linked personal data from all tests of the platform. + +## Data being exported + +The data being exported is listed by the tabs of the test. In general, only users with the 'Edit Settings' permission are able to export data. Exceptions are explicitly listed. + +### Settings - Personal Test Settings Templates + +When exporting a Personal Test Settings Template, the field 'Author' and the 'Creation Date' is exported. + +### Participants + +At this tab the following export files are available: + +- Scored Test Attempt +- All test attempts +- as Certificate (PDF): uses the Certificate Service (see above) + +Those export files contain the following personal data of the participants, which all originate from the user service (see above): + +- Name +- Login +- E-Mail +- Matriculation Number +- Salutation +- Street +- City, State +- Zip Code / Post Code +- Country +- Institution +- Department + +### My Results + +At the subtabs 'Test Results' and 'Printable List of Answers' users with the 'Read' permission are able to download their own data via the button 'Print'. Those data contains their 'Name' and 'Matriculation number'. + +If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not included. + +### History + +At this tab the 'Export Legacy Log Data' is available, which can be used for historical purposes, and any data shown at the table can be exported (see above for details). + +### Export + +- There are three export files, which contain personal data (see below). +- If export files are created, they contain the personal data, which is available at the time of the creation. +- If personal data is to be deleted after the creation of an export file (which contains such data), the export file has to be deleted, too. + +#### Archive File + +- The Archive file contains all personal data, which is being stored and presented at the test (see above). +- It's purpose is to have this data easily accesible outside of ILIAS. + +#### XML + +- The XML export contains the personal data 'Author' of the questions and of the test itself within the metadata. +- It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible. + +#### XML (incl. Participant Results) + +- The XML export incl. Participant Results contains all personal data, which is being stored and presented at the test (see above). +- The data in the 'History' tab is an exception, this is not included. +- It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible. + +### Administration - Test and Assessment - Log Data - Log Data Output + +Persons with the 'Edit Settings' permission of this administration node are able to export any log entries and all linked personal data from all tests of the platform. From 0e187a80095d0943fa89f8484407266092e3d69b Mon Sep 17 00:00:00 2001 From: Simon Lowe <164848325+slowe47@users.noreply.github.com> Date: Fri, 24 Apr 2026 17:22:12 +0200 Subject: [PATCH 2/3] replacing user with account and adding purposes --- components/ILIAS/Test/PRIVACY.md | 74 +++++++++++++++++++------------- 1 file changed, 45 insertions(+), 29 deletions(-) diff --git a/components/ILIAS/Test/PRIVACY.md b/components/ILIAS/Test/PRIVACY.md index b4957d9f1343..e30f26c15f5d 100644 --- a/components/ILIAS/Test/PRIVACY.md +++ b/components/ILIAS/Test/PRIVACY.md @@ -31,29 +31,31 @@ The Test component employs the following services, please consult the respective ### Administration - Test and Assessment -At the Administration node for Test and Assessment users having 'Edit Settings' permissions are able to configure some functionality, which has an impact on personal data handling. +At the Administration node for Test and Assessment accounts having 'Edit Settings' permissions are able to configure some functionality, which has an impact on personal data handling. -#### Settings +#### Subtab Settings -The field 'Unique user criteria' is used to specify which unique user criteria is used for test result import/export. Because of the following options this may changes the personal data contained at the export of a test: +The field 'Unique user criteria' is used to specify which unique account criteria is used for test result import/export. Because of the following options this may changes the personal data contained at the export of a test: - usr_id - login - email - matriculation - ext_account -Those information originate from the user service (see above). +Those information originate from the user service (see above). The 'Unique user criteria' is needed to link the correct accounts when importing an export file, which includes participant results. -#### Log Data +#### Subtab Log Data At the subtab 'Settings' there are the following options for logging (of personal data): - The field 'Activate Test and Assessment Logging' activates the logging at the 'History' of the test. -- The field 'Log IP' acitvates the saving of the IP address of users at the 'History' of the test. +- The field 'Log IP' acitvates the saving of the IP address of accounts at the 'History' of the test. + +The purpose of both options is to store important events and information for configuring and performing tests. This gives the possibility to check those information in case of issues or concerns after performing tests. ### Settings of a test -The settings of a test can be changed by users having 'Edit Settings' permissions. +The settings of a test can be changed by accounts having 'Edit Settings' permissions. #### General @@ -63,14 +65,14 @@ At the subtab 'General' from the settings of a test it is possible to choose one If the second option is selected, no personal data of test attempts is presented at the test. If the user is not logged in while performing the test attempt, additionally no personal data is stored. Please have a look at the detailled information at the following sections. -In addition the 'Exam View' and it's sub-option 'Show Name of Participant' can be activated. +In addition the 'Exam View' and it's sub-option 'Show Name of Participant' can be activated, which have impact on the presented personal data. #### Scoring and Results -At the subtab 'Scoring and Results' from the settings of a test a user having 'Edit Settings' permission is able to: +At the subtab 'Scoring and Results' from the settings of a test a account having 'Edit Settings' permission is able to: -- specify wether users have access to their own test results (and therefore to their own personal data). -- activate the 'Rankings' functionality, which potentially presents personal data to all participating users. +- specify wether accounts have access to their own test results (and therefore to their own personal data). +- activate the 'Rankings' functionality, which potentially presents personal data to all participating accounts. ## Data being stored @@ -78,8 +80,7 @@ The data being stored is listed by the tabs of the test. ### Test - data being stored while performing a test -While a user performs a test, the following data is stored. After finishing the test, this data is presented at various other tabs (see [Data being presented](#Data being presented)). -This is needed in order to provide the functionality of the test component. All listed data is at least linked to the 'User ID'. +While a account performs a test, the following data is stored. After finishing the test, this data is presented at various other tabs (see [Data being presented](#Data being presented)). This is needed in order to provide the functionality of the test component. All listed data is at least linked to the 'User ID'. - User ID - Client IP @@ -102,25 +103,31 @@ Those tabs use the COPage service and store personal data within this usage (see #### Personal Test Settings Templates -- At the creation process of Personal Test Settings Templates the field 'Author' is prefilled with the full name of the user, which is creating the template. If this value is not changed, the name of the user is stored. +- At the creation process of Personal Test Settings Templates the field 'Author' is prefilled with the full name of the account, which is creating the template. If this value is not changed, the name of the account is stored. - Together with the field 'Author' the 'Creation Date' of the template is stored. +- Those information are needed in order to present the origin of a Personal Test Settings Template. ### Questions -- At the creation process of questions the field 'Author' is prefilled with the full name of the user, which is creating the question. If this value is not changed, the name of the user is stored. +- At the creation process of questions the field 'Author' is prefilled with the full name of the account, which is creating the question. If this value is not changed, the name of the account is stored. - At the editing of questions the field 'Author' contains the previous saved value. If the value is changed and personal data is entered, it will be stored. +- By storing (and presenting) the value for 'Author' it is possible to contact the account, if there are problems with the question or the configuration of it. In addition it supports the collaborative development of questions. - Ownership of Questions: Owners of questions are stored in the Test as reference to the 'User ID'. The data is required to manage detailed access and permissions on usage and editing of the question. - The creation, change and deletion of questions is stored as log entry. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. ### Participants -- A user having 'Edit Settings' permission is able to assign users as participants of a test. -- In addition, users which perform a test are added as participants automatically. -- For all users, which are assigned as participants, the 'User ID' is stored as link to the test. +- A account having 'Edit Settings' permission is able to assign accounts as participants of a test. +- In addition, accounts which perform a test are added as participants automatically. +- For all accounts, which are assigned as participants, the 'User ID' is stored as link to the test. - If a 'Client IP Range' is set for a participant, the entered value is stored, linked to the 'User ID'. -- For some actions, which are offered at this tab, log entries are stored. Therefore the 'User ID' (of the user with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. +- For some actions, which are offered at this tab, log entries are stored. Therefore the 'User ID' (of the account with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. + +Those information are needed in order to manage the access to the test. ### Scoring -If the Scoring of a test attempt is changed at this tab, this event is logged. Therefore the 'User ID' (of the user with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. +If the Scoring of a test attempt is changed at this tab, this event is logged. Therefore the 'User ID' (of the account with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. + +This ensures the traceability of test results. ### Metadata @@ -134,6 +141,8 @@ The data being presented is listed by the tabs of the test. While performing a test, the 'Name' of the participant himself is shown, if the 'Exam View' and it's sub-option 'Show Name of Participant' is activated. +When a test is performed in person, the presentation of this information can be used for validating the logged in account. + ### Settings #### Edit Introduction & Edit Concluding Remarks @@ -180,9 +189,11 @@ The table 'Participants' shows following personal data linked to the test attemp If the test is set to anonymous (see above), 'Name', 'Login' and 'Matriculation Number' are not presented. +The purpose of the presentation is giving accounts with 'Edit Settings' permission an overview of all test attempts and the related data. + ### My Results -At the subtabs 'Test Results' and 'Printable List of Answers' users are able to access their own data. Those data contains their 'Name' and 'Matriculation Number'. +At the subtabs 'Test Results' and 'Printable List of Answers' accounts are able to access their own data. Those data contains their 'Name' and 'Matriculation Number'. If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not presented. @@ -211,6 +222,8 @@ At the 'History' log entries are shown, which originate in the change of the tes If the test is set to anonymous, no entries are shown for the participation of the test. +The purpose of the tab 'History' is mainly checking events in case of issues or concerns after performing tests. + ### Metadata This tab uses the Metadata service and presents personal data within this usage (see above). @@ -221,11 +234,11 @@ At this tab of the Administration, the same personal data is listed for all test ## Data being deleted -The data being deleted is listed by the tabs of the test. In general, only users with the 'Edit Settings' permission are able to delete data. Exceptions are explicitly listed. +The data being deleted is listed by the tabs of the test. In general, only accounts with the 'Edit Settings' permission are able to delete data. Exceptions are explicitly listed. ### Test -Users with the 'Read' permission are able to delete their own answers while performing a test, which are linked to their 'User ID'. The answers are not linked to the 'User ID', if the test is set to anonymous and is performed without being logged in. +Accounts with the 'Read' permission are able to delete their own answers while performing a test, which are linked to their 'User ID'. The answers are not linked to the 'User ID', if the test is set to anonymous and is performed without being logged in. ### Questions @@ -236,19 +249,19 @@ It is possible to delete questions and within this the personal data at the fiel At this tab the following personal data can be deleted: - Test results of participants and all linked personal data -- Assignment of users as participants and all linked personal data +- Assignment of accounts as participants and all linked personal data ### Administration - Test and Assessment - Log Data - Log Data Output -Users with the 'Edit Settings' permission of this administration node are able to delete any log entries and all linked personal data from all tests of the platform. +Accounts with the 'Edit Settings' permission of this administration node are able to delete any log entries and all linked personal data from all tests of the platform. ## Data being exported -The data being exported is listed by the tabs of the test. In general, only users with the 'Edit Settings' permission are able to export data. Exceptions are explicitly listed. +The data being exported is listed by the tabs of the test. In general, only accounts with the 'Edit Settings' permission are able to export data. Exceptions are explicitly listed. ### Settings - Personal Test Settings Templates -When exporting a Personal Test Settings Template, the field 'Author' and the 'Creation Date' is exported. +When exporting a Personal Test Settings Template, the field 'Author' and the 'Creation Date' is exported. This secures being able to identify the origin of a Personal Test Settings Template after importing it to a account. ### Participants @@ -272,9 +285,11 @@ Those export files contain the following personal data of the participants, whic - Institution - Department +The purpose of the different export files is to extract the dedicated test results of one or more accounts. This e.g. can be used for discussing the results with the participant. + ### My Results -At the subtabs 'Test Results' and 'Printable List of Answers' users with the 'Read' permission are able to download their own data via the button 'Print'. Those data contains their 'Name' and 'Matriculation number'. +At the subtabs 'Test Results' and 'Printable List of Answers' accounts with the 'Read' permission are able to download their own data via the button 'Print'. Those data contains their 'Name' and 'Matriculation number'. If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not included. @@ -291,7 +306,7 @@ At this tab the 'Export Legacy Log Data' is available, which can be used for his #### Archive File - The Archive file contains all personal data, which is being stored and presented at the test (see above). -- It's purpose is to have this data easily accesible outside of ILIAS. +- It's purpose is to have this data easily accesible outside of ILIAS, e.g. for archivating the data long-term. #### XML @@ -303,6 +318,7 @@ At this tab the 'Export Legacy Log Data' is available, which can be used for his - The XML export incl. Participant Results contains all personal data, which is being stored and presented at the test (see above). - The data in the 'History' tab is an exception, this is not included. - It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible. +- This export file can be used to e.g. provide the test results to the participants at another ILIAS installation. ### Administration - Test and Assessment - Log Data - Log Data Output From 94202a0f337a14737283fe7819784bb40a737d8e Mon Sep 17 00:00:00 2001 From: Simon Lowe <164848325+slowe47@users.noreply.github.com> Date: Fri, 12 Jun 2026 07:40:22 +0200 Subject: [PATCH 3/3] working through the feedback and revising the entire document --- components/ILIAS/Test/PRIVACY.md | 275 +++++++++++-------------------- 1 file changed, 94 insertions(+), 181 deletions(-) diff --git a/components/ILIAS/Test/PRIVACY.md b/components/ILIAS/Test/PRIVACY.md index e30f26c15f5d..fed04fd1c27f 100644 --- a/components/ILIAS/Test/PRIVACY.md +++ b/components/ILIAS/Test/PRIVACY.md @@ -4,83 +4,78 @@ ## General information -The module Test and the module TestQuestionPool are still tied together in most intricate ways. The primary component of concern in regards to privacy related evaluations is the Test. As the lines between these components are blurred, it is advised to never look at only one of the components but always at both. +The Test component is used to create, manage and run tests, which includes creating and managing questions. There are many use cases for the Test component, which is why it has so many settings. The most common scenarios are likely to be self-assessment tests and examinations. + +To ensure that this functionality meets the expectations of all stakeholders, a great deal of data needs to be stored and displayed within this component. + +The Test component and the TestQuestionPool component are still tied together in most intricate ways. The primary component of concern in regards to privacy related evaluations is the Test. As the lines between these components are blurred, it is advised to never look at only one of the components but always at both. ## Integrated components -The Test component employs the following services, please consult the respective privacy.mds +The Test component employs the following components, please consult the respective privacy.mds - - [AccessControl](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/AccessControl/PRIVACY.md): Is used for permission handling and is able to present personal data. - - [Certificate](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Certificate/PRIVACY.md): Is able to use personal data for certificate generation. - - [COPage](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/COPage/PRIVACY.md): Is used for content creation/presentation and is able to store, present and delete personal data. - - CSV: Is used for export creation and is able to export personal data. - - Excel: Is used for export creation and is able to export personal data. - - Export: Is used for export creation and is able to export personal data. - - [InfoScreen](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/InfoScreen/PRIVACY.md): Is used as in any repository object and is able to present personal data. + - [AccessControl](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/AccessControl/PRIVACY.md) + - [Certificate](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Certificate/PRIVACY.md): Is used for certificate creation and uses test-specific placeholders [RESULT_PASSED], [RESULT_PERCENT], [MAX_POINTS], [RESULT_MARK_SHORT], [RESULT_MARK_LONG] + - [COPage](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/COPage/PRIVACY.md): Is used for content creation/presentation within questions, Introduction and Concluding Remarks and is able to store, present and delete personal data. + - [CSV](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/CSV) + - [Excel](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Excel) + - [Export](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/Export) + - [InfoScreen](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/InfoScreen/PRIVACY.md) - [KioskMode](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/KioskMode/PRIVACY.md) - - [LTI Provider](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/LTIProvider/PRIVACY.md) Is used to provide the Test via LTI and is able to present personal data. + - [LTI Provider](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/LTIProvider/PRIVACY.md): Is used to provide the Test via LTI and is able to present personal data. - [Metadata](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/MetaData/Privacy.md): Stores the full name of the author of the test. - - [Notes](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Notes/Privacy.md): Is used to create, edit and present comments for the test. - - [Object](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/ILIASObject): Stores the account which created the object as it's owner and creation and update timestamps for the object. + - [Notes](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Notes/Privacy.md) + - [Object](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/ILIASObject) - [Skill (Competence) Service](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Skill/PRIVACY.md) - [Taxonomy](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Taxonomy/PRIVACY.md) - [TestQuestionPool](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/TestQuestionPool/PRIVACY.md) - - Tracking: Is used for Learning Progress and is able to store, present and delete personal data. + - [Tracking](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/Tracking) + - [User](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/User): Provides information about the account being used using the Test component in order to store those. ## Configuration -### Administration - Test and Assessment +### Administration > Repository and Objects > Test and Assessment At the Administration node for Test and Assessment accounts having 'Edit Settings' permissions are able to configure some functionality, which has an impact on personal data handling. -#### Subtab Settings - -The field 'Unique user criteria' is used to specify which unique account criteria is used for test result import/export. Because of the following options this may changes the personal data contained at the export of a test: -- usr_id -- login -- email -- matriculation -- ext_account - -Those information originate from the user service (see above). The 'Unique user criteria' is needed to link the correct accounts when importing an export file, which includes participant results. - -#### Subtab Log Data - -At the subtab 'Settings' there are the following options for logging (of personal data): - -- The field 'Activate Test and Assessment Logging' activates the logging at the 'History' of the test. -- The field 'Log IP' acitvates the saving of the IP address of accounts at the 'History' of the test. +At Administration > Repository and Objects > Test and Assessment > Settings it is possible to select which 'Unique user criteria' is used in test imports/exports. The selected type of personal data will be included in export type 'XML incl. Participants Results' of a test for each account. Options are: usr_id, login, email, matriculation, ext_account. This personal data is required to match accounts results when importing an export file at the same or another platform. +At Administration > Repository and Objects > Test and Assessment > Log Data accounts with 'Edit Settings' permission can activate the History-tab via the checkbox 'Activate Test and Assessment Logging'. Additionally the setting 'Log IP' allows for logging the IP-adress of participants along with the interactions as well as specific settings of said test during the interaction. The purpose of both options is to store important events and information for configuring and performing tests. This gives the possibility to check those information in case of issues or concerns after performing tests. -### Settings of a test - -The settings of a test can be changed by accounts having 'Edit Settings' permissions. - -#### General +### Test > Settings > General -At the subtab 'General' from the settings of a test it is possible to choose one of the following options for the field 'Privacy': +At the subtab Test > Settings > General for accounts with 'Edit Settings' permission it is possible to choose one of the following options for the field 'Privacy': - Results with names (pre-selected) - Results without names / anonymous test If the second option is selected, no personal data of test attempts is presented at the test. If the user is not logged in while performing the test attempt, additionally no personal data is stored. Please have a look at the detailled information at the following sections. -In addition the 'Exam View' and it's sub-option 'Show Name of Participant' can be activated, which have impact on the presented personal data. +In addition the 'Exam View' and it's sub-option 'Show Name of Participant' can be activated by accounts with 'Edit Settings' permission, which have impact on the presented personal data. -#### Scoring and Results +### Test > Settings > Scoring and Results -At the subtab 'Scoring and Results' from the settings of a test a account having 'Edit Settings' permission is able to: +At the subtab Test > Settings > Scoring and Results accounts having 'Edit Settings' permission are able to specify whether accounts have access to their own test results (and therefore to their own personal data). When activating the access to the accounts own results, it is possible to dedicated activate the presented data: -- specify wether accounts have access to their own test results (and therefore to their own personal data). -- activate the 'Rankings' functionality, which potentially presents personal data to all participating accounts. +- ‘Passed’ / ‘Failed’ Status +- Grade +- Detailed Results (these contain all given answers and points scored) -## Data being stored +In addition accounts with 'Edit Settings' permission are able to activate the 'Rankings' functionality, which potentially presents personal data to all participating accounts. There are several sub-settings for 'Rankings', which specify the presented personal data: -The data being stored is listed by the tabs of the test. +- Mode: Own Position, Top Ranks, Own Position and Top Ranks +- Number of Top Ranks +- Without Names: prevents the presentation of accounts names +- Date / Time: additional column in the rankings table showing when the test was finished +- Point Score +- Percentage Score +- Time Spent: additional column in the ranking table showing the time taken to complete the test -### Test - data being stored while performing a test +## Data being stored + +### Test > Test - data being stored while performing a test -While a account performs a test, the following data is stored. After finishing the test, this data is presented at various other tabs (see [Data being presented](#Data being presented)). This is needed in order to provide the functionality of the test component. All listed data is at least linked to the 'User ID'. +While an account performs a test, the following data is stored. After finishing the test, this data is presented at various other tabs (see [Data being presented](#Data being presented)). This is needed in order to provide the functionality of the test component. All listed data is at least linked to the 'User ID'. - User ID - Client IP @@ -93,88 +88,55 @@ While a account performs a test, the following data is stored. After finishing t - Mark and status of the test attempt ? - Log Entry Type and Interaction Type -### Settings - -In general the change of settings is logged. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. +### Test > Settings -#### Edit Introduction & Edit Concluding Remarks +In general the change of settings at the tab Test > Settings is logged. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. -Those tabs use the COPage service and store personal data within this usage (see above). +At the creation process of a template at Test > Settings > Personal Test Settings Templates the field 'Author' is prefilled with the full name of the account, which is creating the template. If this value is not changed, the name of the account is stored. In addition the 'Creation Date' of the template and the User-ID is stored. Those information are needed in order to present the origin of a Personal Test Settings Template. -#### Personal Test Settings Templates +### Test > Questions -- At the creation process of Personal Test Settings Templates the field 'Author' is prefilled with the full name of the account, which is creating the template. If this value is not changed, the name of the account is stored. -- Together with the field 'Author' the 'Creation Date' of the template is stored. -- Those information are needed in order to present the origin of a Personal Test Settings Template. +In genereal the creation, change and deletion of questions at the tab Test > Questions is stored as log entry. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. -### Questions +At the creation and editing process of questions the field 'Author' is prefilled with the full name of the account, which is creating the question. If this value is not changed, the name of the account is stored. If the value is changed and personal data is entered, it will be stored. By storing (and presenting) the value for 'Author' it is possible to contact the account, if there are problems with the question or the configuration of it. In addition it supports the collaborative development of questions. -- At the creation process of questions the field 'Author' is prefilled with the full name of the account, which is creating the question. If this value is not changed, the name of the account is stored. -- At the editing of questions the field 'Author' contains the previous saved value. If the value is changed and personal data is entered, it will be stored. -- By storing (and presenting) the value for 'Author' it is possible to contact the account, if there are problems with the question or the configuration of it. In addition it supports the collaborative development of questions. -- Ownership of Questions: Owners of questions are stored in the Test as reference to the 'User ID'. The data is required to manage detailed access and permissions on usage and editing of the question. -- The creation, change and deletion of questions is stored as log entry. Therefore the 'User ID', the 'Log Entry Type' and 'Interaction Type' is stored. +Owners of questions (account which has created a question) are stored in the Test as reference to the 'User ID'. This data is required to manage detailed access and permissions on usage and editing of the question. -### Participants -- A account having 'Edit Settings' permission is able to assign accounts as participants of a test. -- In addition, accounts which perform a test are added as participants automatically. -- For all accounts, which are assigned as participants, the 'User ID' is stored as link to the test. -- If a 'Client IP Range' is set for a participant, the entered value is stored, linked to the 'User ID'. -- For some actions, which are offered at this tab, log entries are stored. Therefore the 'User ID' (of the account with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. +### Test > Participants -Those information are needed in order to manage the access to the test. +An account having 'Edit Settings' permission is able to assign accounts as participants of a test at the tab Test > Participants. In addition, accounts which perform a test are added as participants automatically. For all accounts, which are assigned as participants, the 'User ID' is stored as link to the test. If a 'Client IP Range' is set for a participant, the entered value is stored, linked to the 'User ID'. Those information are needed in order to manage the access to the test. -### Scoring -If the Scoring of a test attempt is changed at this tab, this event is logged. Therefore the 'User ID' (of the account with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. +For some actions, which are offered at this tab, log entries are stored. Therefore the 'User ID' (of the account with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. -This ensures the traceability of test results. +### Test > Scoring -### Metadata - -This tab uses the Metadata service and stores personal data within this usage (see above). +If the Scoring of a test attempt is changed at the tab Test > Scoring, this event is logged. Therefore the 'User ID' (of the account with 'Edit Settings' permission), the 'Log Entry Type' and 'Interaction Type' is stored. This ensures the traceability of test results. ## Data being presented -The data being presented is listed by the tabs of the test. - -### Test - data being presented while performing a test - -While performing a test, the 'Name' of the participant himself is shown, if the 'Exam View' and it's sub-option 'Show Name of Participant' is activated. - -When a test is performed in person, the presentation of this information can be used for validating the logged in account. - -### Settings - -#### Edit Introduction & Edit Concluding Remarks - -Those tabs use the COPage service and present personal data within this usage (see above). - -#### Personal Test Settings Templates +### Test > Test - data being presented while performing a test -- At this tab the values of the field 'Author' for all Personal Test Settings Templates are shown, which may contain personal data. -- The 'Creation Date' of the template is also prsented, which is directly linked to the value for 'Author'. +While performing a test, the 'Name' of the participant himself is shown, if the 'Exam View' and it's sub-option 'Show Name of Participant' is activated. When a test is performed in person, the presentation of this information can be used for validating the logged in account. -### Questions +### Test > Settings > Personal Test Settings Templates -At the overview of the questions of a test, the values of the field 'Author' for all questions are shown, which may contain personal data. +The values of the field 'Author' for all Personal Test Settings Templates at the subtab Test > Settings > Personal Test Settings Templates are presented, which may contain personal data. The 'Creation Date' of the template is also prsented, which is directly linked to the value for 'Author'. -The following sections describe the possible actions for the questions of a test. +### Test > Questions -#### Statistics +At the overview of the questions at the tab Test > Questions, the values of the field 'Author' for all questions are shown, which may contain personal data. -The 'Author' of other tests is displayed at the table 'This question is used in the following tests', if the question is used in other tests, too. This information originates from the metadata service (see above). +When using the 'Statistics' action from a question, the 'Author' of other tests is displayed at the table 'This question is used in the following tests', if the question is used in other tests, too. This information originates from the metadata component (see above). -#### Print Answers +When using the 'Print Answers' action from a question, all answers to a question with the 'Name' of the participated accounts are presented here. If the test is set to anonymous (see above), this data is not presented. -All answers to a question with the 'Name' of the participants are presented here. If the test is set to anonymous (see above), this data is not presented. +### Test > Participants -### Participants +The table 'Participants' at the tab Test > Participants shows following personal data linked to the test attempt. Those are also shown, if the action 'Show Results' is used. The purpose of the presentation is giving accounts with 'Edit Settings' permission an overview of all test attempts and the related data. -The table 'Participants' shows following personal data linked to the test attempt. Those are also shown, if the action 'Show Results' is used. - -- Name (originates from the user service) -- Login (originates from the user service) -- Matriculation Number (originates from the user service) +- Name (originates from the user component) +- Login (originates from the user component) +- Matriculation Number (originates from the user component) - Starting time stamp - Duration - Number of Attempts Made @@ -189,17 +151,13 @@ The table 'Participants' shows following personal data linked to the test attemp If the test is set to anonymous (see above), 'Name', 'Login' and 'Matriculation Number' are not presented. -The purpose of the presentation is giving accounts with 'Edit Settings' permission an overview of all test attempts and the related data. - -### My Results - -At the subtabs 'Test Results' and 'Printable List of Answers' accounts are able to access their own data. Those data contains their 'Name' and 'Matriculation Number'. +### Test > My Results -If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not presented. +At the subtabs Test > My Results > Test Results and Test > My Results > Printable List of Answers accounts are able to access their own test results. Those data contains their 'Name' and 'Matriculation Number'. If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not presented. -### Scoring +### Test > Scoring -The tab 'Scoring' shows following personal data linked to the test attempt. +The tab Test > Scoring shows following personal data linked to the test attempt. This is needed in order to review and probably change the scoring ot test attempts. If the test is set to anonymous (see above), 'Name' and 'Login' are replaced by the 'Test ID'. - Name - Login @@ -208,11 +166,9 @@ The tab 'Scoring' shows following personal data linked to the test attempt. - Scored points for all questions - Scoring completed -If the test is set to anonymous (see above), 'Name' and 'Login' are replaced by the 'Test ID'. +### Test > History -### History - -At the 'History' log entries are shown, which originate in the change of the test settings and questions or in the participation of the test. The following personal data is presented: +At the tab Test > History log entries are shown, which originate in the change of the test settings and questions or in the participation of the test. The purpose of the tab 'History' is mainly checking events in case of issues or concerns after performing tests. The following personal data is presented: - Date and Time of the event - Name and Login of Author or Participant @@ -220,58 +176,35 @@ At the 'History' log entries are shown, which originate in the change of the tes - Log Entry Type - Interaction Type -If the test is set to anonymous, no entries are shown for the participation of the test. - -The purpose of the tab 'History' is mainly checking events in case of issues or concerns after performing tests. +Some examples for Interaction Types are 'Test Run Started', 'Question Shown', 'Answer Submitted' and 'Test Run Finished' for participating accounts and 'Main Settings Modified', 'Run of Participant Closed', 'Grading Reset' and 'Participant Data Removed' for accounts with 'Edit Settings' permission. -### Metadata - -This tab uses the Metadata service and presents personal data within this usage (see above). +If the test is set to anonymous, no entries are shown for the participation of the test. -### Administration - Test and Assessment - Log Data - Log Data Output +### Administration > Repository and Objects > Test and Assessment > Log Data > Log Data Output -At this tab of the Administration, the same personal data is listed for all tests at the platform as listed at the section 'History'. +Accounts with the 'Edit Settings' permission of the administration node Administration > Repository and Objects > Test and Assessment > Log Data > Log Data Output are able to list the same personal data for all tests at the platform as listed at the section 'History' of any test. ## Data being deleted -The data being deleted is listed by the tabs of the test. In general, only accounts with the 'Edit Settings' permission are able to delete data. Exceptions are explicitly listed. - -### Test - -Accounts with the 'Read' permission are able to delete their own answers while performing a test, which are linked to their 'User ID'. The answers are not linked to the 'User ID', if the test is set to anonymous and is performed without being logged in. +In general, only accounts with 'Edit Settings' permission are able to delete data. Exceptions are explicitly listed. -### Questions +At the tab Test > Questions it is possible to delete questions and within this the personal data at the field 'Author' is deleted. -It is possible to delete questions and within this the personal data at the field 'Author' is deleted. +At the tab Test > Participants the test results of participants and all linked personal data can be deleted. Additionally the assignment of accounts as participants can be cancelled, which deletes all linked personal data. -### Participants +Accounts with the 'Edit Settings' permission of the tab Administration > Repository and Objects > Test and Assessment > Log Data > Log Data Output are able to delete any log entries and all linked personal data from all tests of the platform. -At this tab the following personal data can be deleted: +Accounts with 'Read' permission are able to delete their own answers while performing a test at the tab Test > Test, which are linked to their 'User ID'. The answers are not linked to the 'User ID', if the test is set to anonymous and is performed without being logged in. -- Test results of participants and all linked personal data -- Assignment of accounts as participants and all linked personal data - -### Administration - Test and Assessment - Log Data - Log Data Output - -Accounts with the 'Edit Settings' permission of this administration node are able to delete any log entries and all linked personal data from all tests of the platform. +If the option 'Allow Deletion of Non-Scoring Attempts' at Settings > Scoring and Results > Access to Test Results is acitvated, accounts with 'Read' permission are able to delete their own non-scoring test attempts and all linked personal data at the tab Test > My Results. ## Data being exported -The data being exported is listed by the tabs of the test. In general, only accounts with the 'Edit Settings' permission are able to export data. Exceptions are explicitly listed. - -### Settings - Personal Test Settings Templates +In general, only accounts with the 'Edit Settings' permission are able to export data. Exceptions are explicitly listed. -When exporting a Personal Test Settings Template, the field 'Author' and the 'Creation Date' is exported. This secures being able to identify the origin of a Personal Test Settings Template after importing it to a account. +When exporting a Personal Test Settings Template at Test > Settings > Personal Test Settings Templates, the fields 'Author', 'Creation Date' and "User-ID" are exported. This secures being able to identify the origin of a Personal Test Settings Template after importing it to an account. -### Participants - -At this tab the following export files are available: - -- Scored Test Attempt -- All test attempts -- as Certificate (PDF): uses the Certificate Service (see above) - -Those export files contain the following personal data of the participants, which all originate from the user service (see above): +At the tab Test > Participants the export files 'Scored Test Attempt', 'All test attempts' and 'as Certificate (PDF)' are available. The purpose of the different export files is to extract the dedicated test results of one or more accounts. This e.g. can be used for discussing the results with the participant. Those export files contain the following personal data of the participants, which all originate from the user component (see above): - Name - Login @@ -285,41 +218,21 @@ Those export files contain the following personal data of the participants, whic - Institution - Department -The purpose of the different export files is to extract the dedicated test results of one or more accounts. This e.g. can be used for discussing the results with the participant. - -### My Results - -At the subtabs 'Test Results' and 'Printable List of Answers' accounts with the 'Read' permission are able to download their own data via the button 'Print'. Those data contains their 'Name' and 'Matriculation number'. - -If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not included. +At the tab Test > History the 'Export Legacy Log Data' is available, which can be used for historical purposes, and any data shown at the table can be exported (see above for details). -### History +At the subtabs Test > My Results > Test Results and Test > My Results > Printable List of Answers accounts with 'Read' permission are able to download their own data via the button 'Print'. Those data contains their 'Name' and 'Matriculation number'. If the test is set to anonymous (see above), 'Name' and 'Matriculation Number' are not included. -At this tab the 'Export Legacy Log Data' is available, which can be used for historical purposes, and any data shown at the table can be exported (see above for details). +### Test > Export -### Export +There are three export files at the tab Test > Export, which contain personal data (see below). If export files are created, they contain the personal data, which is available at the time of the creation. If personal data is to be deleted after the creation of an export file (which contains such data), the export file has to be deleted, too. -- There are three export files, which contain personal data (see below). -- If export files are created, they contain the personal data, which is available at the time of the creation. -- If personal data is to be deleted after the creation of an export file (which contains such data), the export file has to be deleted, too. +The 'Archive file' contains all personal data, which is being stored and presented at the test (see above). It's purpose is to have this data easily accesible outside of ILIAS, e.g. for archivating the data long-term. -#### Archive File - -- The Archive file contains all personal data, which is being stored and presented at the test (see above). -- It's purpose is to have this data easily accesible outside of ILIAS, e.g. for archivating the data long-term. - -#### XML - -- The XML export contains the personal data 'Author' of the questions and of the test itself within the metadata. +The 'XML' export contains the personal data 'Author' of the questions and of the test itself within the metadata (see above). - It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible. -#### XML (incl. Participant Results) - -- The XML export incl. Participant Results contains all personal data, which is being stored and presented at the test (see above). -- The data in the 'History' tab is an exception, this is not included. -- It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible. -- This export file can be used to e.g. provide the test results to the participants at another ILIAS installation. +The 'XML export incl. Participant Results' contains all personal data, which is being stored and presented at the test (see above). The data in the 'History' tab is an exception, this is not included. It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible. This export file can be used to e.g. provide the test results to the participants at another ILIAS installation. -### Administration - Test and Assessment - Log Data - Log Data Output +### Administration > Repository and Objects > Test and Assessment > Log Data > Log Data Output -Persons with the 'Edit Settings' permission of this administration node are able to export any log entries and all linked personal data from all tests of the platform. +Accounts with the 'Edit Settings' permission of the administration node Administration > Repository and Objects > Test and Assessment > Log Data > Log Data Output are able to export any log entries and all linked personal data from all tests of the platform.